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IN THE CLAIMS: 

Claims 22, 24, and 25 have been cancelled. Claims 30 and 31 have been added. 
Claims 1-21, 23, and 25 - 29 have been amended, as follows: 

1. (currently amended) A method, comprising: 

e stab li sh i ng a phys i ca l chann el b e tw ee n a s e nd e r and a r e c e iv e r; 
sending, from [[the]] a sender to [[the]] a receiver, data through a data channel^ 
the data including a key and a nonce ; 

receiving, at the receiver, the data; [[and]] 

establishing a visual physical channel between the sender and the receiver, the 
sender and receiver being visible to each other; and 

verifying, between the receiver and the sender via the visual physical channel, 
that the data is from the sender by having the receiver respond by sending a repeating 
nonce to the sender, wherein the repeating nonce is an action reguested in the nonce . 

2. (currently amended) The method according to claim 1 , whoro i n tho data 
includ e s: 

a k e y; and 
a nonc e 

wherein the repeating nonce is a hand gesture . 

3. (currently amended) Tho mothod accord i ng to claim 2, whoroin tho vorifying 
compris e s on e of: 

p e rform i ng r e co i v e r - in i t i atod v e rificat i on; and 
performing sondor i n i t i atod vor i fication. The method according to claim 1 , wherein the 
repeating nonce is an audio signal. 
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4. (currently amended) Tho method accord i ng to c l a i m 3, whoro i n 
tho porform i ng rocoiver in i t i at e d ver i f i cat i on compris e s: 

ropoating, by tho r e c ei vor upon receiv i ng th e data, th e nonc e to g e n e rat e d a 
rep e ating nonc e ; 

porce i v i ng, by th e s e ndor, th e r e poating nonc e ; 

vor i fying th e porc ei v e d repeat i ng nonc e i s s e mantica ll y r e lat e d to th e nonc e s e nt; 

acknow le dging, to th e rec ei v e r, that the r e c ei v e r -i n i t i ated v e r i ficat i on i s 
succ e ssfu l , i f th e p e rc e iv e d r e p e ating nonco is v e rif ie d. 

th e p e rforming s e nd e r -i nit i at e d v e r i f i cation compris e s: 

ropoating, by the sond e r after th e s e nding, th e nonc e s e nt to th e r e c e iv e r 
to gon e ratod a r e p e at i ng nonc e ; 

porcoiving, by tho rec ei v e r after r e c e iving th e data, th e repoat i ng nonc e ; 
vorifying th e p e rc ei v e d r e p e ating nonco is tho sam e as th e nonc e 
r e c ei v e d; andacknow le dg i ng, to th e s e nder, that sond e r -i n i t i atod vor i ficat i on is 
succ e ssfu l , i f th e porc ei v e d r e p e ating nonco is v e r i fi e d 

The method according to claim 1 , wherein after the sender verifies the repeating 
nonce, the sender sends a signed message . 

5. (currently amended) The method according to claim [[2]] 4, further 
compr i s i ng including : 

storing, by the receiver, the key received from the sender as a stored key, if the 
verifying is successful; 

sond i ng, from tho condor to tho rocoivor, if tho vorify i ng i c cuccossfu l , a c i gnod 
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m e ssag e ; 

receiving, at the receiver, the signed message; and 

verifying [[the]] a signature in the signed message using the stored key. 

6. (currently amended) A method for a sender, comprising: 
establishing a physical channel with a receiver; 

sending, from the sender to the receiver, data through a data channel , the data 
including a key and a nonce ; and 

verifying, between the sender and the receiver via the physical channel, that the 
receiver receives the data from the sender bv receiving a repeating nonce from the 
receiver, the responding nonce being a response to an action reguested by the nonce . 

7. (currently amended) The method according to claim 6, wherein the data 
i nc l ud e s: 

a k e y; and 
a nonc e 

repeating nonce is one of a sum of two numbers transmitted as the nonce; a 
multiplication of the two numbers, or a division of the two numbers . 

8. (currently amended) Tho mothod accord i ng to c l aim 7, whorein tho vor i fying 
compr i s e s on e of: 

porform i ng rocoivor init i ated ver i f i cat i on, compr i s i ng; 

ropoating, by the rec e iv e r upon r e c ei v i ng th e data, th e nonc e r e c ei v e d 
from tho sondor to gonorate a ropoating nonce; 

porco i ving, by tho condor, tho rep e ating nonce; 

vor i fy i ng that th e p e rc ei v e d r e p e at i ng nonco i s sam e a6 th e nonc e s e nt to 
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tho rec e iv e r; and 

acknowlodging, to tho rocoivor, that tho rec e iver i nitiatod vor i f i cation i s 
suGGOssfu l , i f tho p e rco i vod repeat i ng nonco i s vorifiod; and 
perform i ng sondor in i tiatod vorif i cation, comprising: 

repeating, by tho sond e r aft e r th e s ending, th e nonc e s e nt to th e r e c e iv e r 
to g e n e rat e a r e p e at i ng nonc e ; 

p e rc ei v i ng, by th e r e G ei vor upon recoiv i ng th e data, th e r e p e at i ng nonc e ; 
vor i fy i ng that tho ropoating nonco is samo as tho nonco roco i v e d; and 
acknowledging, to tho condor, that sondor i n i tiatod vor i f i cat i on i s 
succ e ssfu l , i f th e perc e iv e d repoat i ng nonco i s v e rif ie d 

The method according to claim 6, wherein the repeating nonce is an audio signal 
including a phrase spoken in a language reguested in the nonce . 

9. (currently amended) The method according to claim [[7]] 6, further 
comprising including sending, from the sender to the receiver, if the verifying is 
successful, a signed message. 

10. (currently amended) A method for a receiver, comprising: 
establishing a physical channel with a sender; 

receiving, from the sender, data via a data channel, the data including a key and 
a nonce ; and 

verifying, between the sender and the receiver via the physical channel, that the 
data, received by the receiving, is from the sender bv sending a repeating nonce, the 
repeating nonce including an action reguested in the nonce . 

1 1 . (currently amended) The method according to claim 10, whoro i n tho data 
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includ e s: 

a k e y; and 
a nonc e 

wherein the repeating nonce is an audio signal including a phrase spoken in a 
language reguested in the nonce . 

12. The method according to claim 1 1 , whoro i n tho vorify i ng comprisos one of: 
porforming roco i vor in i tiated vorification, compr i sing: 

ropoat i ng, by th e r e c e iv e r upon r e ce i ving th e data, th e nonco r e c ei v e d 
from tho sondor to gonorato a ropoating nonce; 

porcoiv i ng, by the condor, tho ropoat i ng nonco; 

vor i fying that the p e rc ei vod r e p e ating nonc e is sam e as th e nonco s e nt to 
th e r e c ei v e r; and 

acknow l edg i ng, to tho rocoivor, that tho roco i vor init i atod vorification is 
succ e ssfu l , i f th e perc e iv e d nonc e is v e r i f ie d; and 

porforming sendor in i t i atod vorification, compr i sing: 

ropoating, by tho sondor aftor tho sending, tho nonco to gonorato a 
ropoat i ng nonc e ; 

porco i v i ng, by tho r e c ei ver upon r e ceiv i ng th e data, th e ropoating nonc e ; 
vorifying that tho porco i vod ropoat i ng nonco i s sam e as tho nonco 

rec ei v e d; and 

acknowledging, to tho sondor, that sondor in i t i atod vorificat i on is 
successfu l i f tho p e rcoivod ropoating nonco is vorifiod 

10 t wherein the repeating nonce includes a value corresponding to the addition 
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of two numbers, the two numbers being included in the nonce . 

13. (currently amended) The method according to claim [[11]] 10, further 
compr i s i ng including : 

storing, by the receiver, the key received from the sender as a stored key, if the 
verifying is successful; 

receiving, at the receiver, a signed message; and 

verifying the signature in the signed message using the stored key. 

14. (currently amended) A system, comprising: 
a sender for sending data; 

a data channel through which the sender sends data including a nonce and a 

key; 

a receiver for receiving the data sent from the sender via the data channel; and 
a visual physical channel, established between the sender and the receiver who 
are in visible range of each other , through which the receiver verifies that the data 
received by the receiver is from the sende r, the receiver verifying by sending a 
repeating nonce, the repeating nonce including an action reguested in the nonce . 

15. (currently amended) The system according to claim 14, wherein the sender 
compris e s includes : 

an information generation mechanism for generating the data , the data including 

the key and the nonce ; and 

a transmitter for transmitting the data to the receiver via the data channelf-af>4 
a f i rst v e rificat i on m e chanism for v e r i fying, via the vis i b le phy si ca l chann e l, that 

th e data r e c e iv e d by th e r e c e iv e r is from th e s e nd e r . 
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16. (currently amended) The system according to claim [[15]] 14, wherein the 
receiver compr i s es includes : 

a transmission receiver for intercepting the data, sent from the sender through 
the data channel; and 

a s e cond v e rification m e chanism for v e rifying, via th e phys i ca l chann e l and 
coop e rat i ng w i th th e f i rst v e rificat i on m e chan i sm i n tho s e nd e r, that the data roc e iv e d is 
from th e sondor; and 

a key storage for storing [[a]] the key included in the received data, if the 
verifying is successful. 

17. (currently amended) The system according to claim 16, wherein 
the sender further compr i s i ng including a signed message generation 

mechanism for generating a signed message to be sent, after the verifying, to the 
receiver through the transmitter, the signed message including a signature of the 
sender; and 

the receiver further comprising a signature verification mechanism for verifying, 
upon receiving the signed message, the signature of the sender received through the 
transmission receiver. 

18. (currently amended) A system for a sender, comprising: 

an information generation mechanism for generating data , the data including a 
key and a nonce : 

a transmitter for transmitting the data to a receiver via a data channel; and 
a verification mechanism for verifying, via a physical channel established 
between the sender and the receiver, that the data received by the receiver is from the 
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sender by receiving a repeating nonce, the repeating nonce including a value of an 
action reguested in the nonce . 

19. (currently amended) The system according to claim 18, wherein the 
v e r i f i cation m e chan i sm i ncludes on e of: 

a rece i v e r - in i tiat e d v e rificat i on m e chanism for p e rforming a reooivor i nitiat e d 
v e r i fication, compris i ng: 

ropoat i ng, by tho rec ei v e r upon r e c ei v i ng th e data, th e nonc e r e c ei v e d 
from tho sondor to g e norato a ropoating nonc e ; 

porceiv i ng, by th e send e r, th e rep e at i ng nonc e ; 

vor i fy i ng that th e porc ei v e d r e p e at i ng nonc e i s samo as tho nonce s e nt to 
th e r e c ei v e r; and 

acknow l edg i ng, to tho rocoivor, that tho roco i ver init i atod ver i fication i s 
successfu l , i f tho porcoivod nonco i s vor i fiod; and 

a sond e r i n i tiat e d v e rification m e chan i sm for p e rforming a s e nder init i at e d 
v e r i f i cation, compr i sing: 

an nonc e r e p e at e r for g e norat i ng a ropoating nonc e using th e nonc e 
contained i n tho data s ent to tho rocoivor; and 

an acknowl e dg e ment porcoivor for perco i ving an acknow l odgomont from 
tho roc e ivor that acknow le dg e that th e r e poating nonco is samo as tho nonco containod 
in th e data 

repeating nonce is a value of an addition of two numbers, the two numbers being 
originally sent in the nonce . 
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20. (currently amended) The system according to claim [[19]] 18, further 
compr i sing including a signed message generation mechanism for generating a signed 
message to be sent, after the verifying, to the receiver through the transmitter, the 
signed message including a signature of the sender. 

21. (currently amended) A system for a receiver, comprising: 

a transmission receiver for intercepting data, sent from a sender through a data 
channel , the data including a key and a nonce ; 

a verification mechanism for verifying, via a physical channel established 
between the sender and the receiver, that the data received is from the sender by 
sending a repeating nonce, the repeating nonce including an action reguested in the 
nonce ; and 

a key storage for storing a key included in the received data, if the verifying is 
successful. 

Claim 22 (cancelled). 

23. (currently amended) The system according to claim [[22]] 21 , further 
compr i sing including a signature verification mechanism for verifying the signature of 
the sender contained in a signed message, sent from the sender after the verifying and 
received by the receiver through the transmission receiver. 

Claims 24 and 25 (cancelled). 

26. (currently amended) A computer-readable medium encoded with a program 
for a condor , the program including instructions , which when executed, causing cause a 
sender computer to : 

send[[ing]], from a sender to a receiver, data through a data channe l the data 
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including a key and a nonce ; 

send[[ing]], from the sender to the receiver a signed message, after verifying, 
botwoon tho condor and tho rocoivor via a physical channel, that the data received by 
the receiver is from the sender bv verifying that a repeating nonce received from the 
receiver includes an action reguested in the nonce sent by the sender . 

27. (currently amended) The medium according to claim 26, wherein toe 
vorify i ng inc l udes ono of: 

porforming r e co i vor in i t i ated ver i f i cation v i a tho physica l channo l ; or 
porform i ng sondor init i ated vor i fication via tho physica l channel 
the repeating nonce is a value of an addition of two numbers, the two numbers 
being sent in the nonce . 

28. (currently amended) A computer-readable medium encoded with a program 
for a roco i vor , the program including instructions , which when executed, caus i ng cause 
a receiver computer to : 

r e c e iv i ng receive , from a sender, data via a data channel , the data including a 
key and a nonce : 

transmit a repeating nonce to the sender, the repeating nonce including an 
action reguested in the nonce: 

stor i ng store a part of tho data the key received from the sender as a stored k e y , 
after verifying the repeating nonce is consistent with the nonce vor i fy i ng botwoon tho 
sond e r and the r e c ei vor v i a a physica l chann e l, that tho data rocoived i s from the 
s e nd e r ; 

roco i v i ng receive , from the sender after the verifying, a signed message 
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containing a signature of the sender; and 

authonticating authenticate the signature in the signed message using the stored 

key. 

29. (currently amended) The medium according to claim 28, wherein the 
vor i fy i ng inc l udes ono of: 

p e rform i ng r e c ei v e r -i nit i at e d v e r i ficat i on via th e phy si cal chann e l; or 
porform i ng condor initiatod vorif i cat i on v i a tho physica l channe l the repeating 

nonce is a value of an addition of two numbers, the two numbers being included in the 

nonce . 

30. (new) The medium according to claim 26, wherein the repeating nonce is an 
audio signal including a phrase spoken in a language as requested in the nonce. 

31 . (new) The medium according to claim 28, wherein the repeating nonce is an 
audio signal including a phrase spoken in a language as requested in the nonce. 
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